Hi everyoneis it possible to get the result of the variable for configuration profile in lower case?Currently I have configured “Lock primary account information” with variables(see screenshot) The result of the variable is always in upper case. it is possible to change it to lower case? if yes then how? 

Hi there! I've hit a bit of a wall. I've been asked to block YouTube Shorts for our students/users but leave the rest of YouTube open.We're running Jamf School + Jamf Safe Internet. I tried a custom rule for youtube.com/shorts, but it’s not working—likely because of how the traffic is vectored or how the API handles the "Reel" endpoints.Does anyone have a workaround for this? Are there specific domains/paths I should be targeting instead? Any links or tips would be huge. Thanks in advance!

I'm looking to setup, add a domain (DRC WIDA testing) to a configuration profile with "Relaxed Domains" for our iPads. I don't see it anywhere I've looked in Jamf Pro configuration profiles, but Apple and WIDA have references to it. This would allow us finally to not have to manually toggle Cross-Site tracking to "on" on each iPad!!!!I've setup a custom configuration as described but I'm hoping there is a non-custom method that I'm just missing. This functionality is supported by a key in the Domains payload CrossSiteTrackingPreventionRelaxedDomains. From WIDA / DRC InsightCross-Website Tracking and Device SupervisionImportant: Sites using iPadOS 16.2 and higher no longer need to enable Cross-Website Tracking aslong as the device is supervised and the domains are relaxed following the instructions below. This can bedone using Automated Device Enrollment and MDM software or by using Apple Configurator.Note:Sites using iPadOS 16.1.2 and below must still enable Cross-Website Tra

Hi,We're starting to see a number of cases being raised internally about some of our Macs (all on macOS 15.1.1) having intermittent login issues.  Our devices are bound to AD and our users have been logging on fine for some time but now we're starting to get issues.  Sometimes the logins are fine.  Sometimes they take ~10 mins and sometimes they appear to stall completely (waited over 2.5 hours in testing) even on the same device.  The login screen appears to freeze (the time doesn't change) and you eventually get the spinning beachball.  SSH is still working and you can run a "jamf policy" successfully.  "Screen Sharing" reports that the user who has attempted to log into the device is the active user when you connect.Can anyone share some tips as to how we would start to investigate this sort of issue let alone resolve it???ThanksStuart

Unable to complete file upload. fiie contents does not match file type in Jamf when uploading an automated device enrollment token from apple business manager

Your enrollment Profile MAY have expired. Try loading a new enrollment profile. I am not sure what to do with this. It is happening immediately following a reset and check in with Jamf. Any assistance is appreciated. 

In the Other changes and Improvements from the release of 11.22 there was a mention that the deferral of updates with some payloads was deprecated with the 26’s and to use Blueprints going forward  However in the Configuration Profiles for both devices and computers it is not stated that this setting is deprecated.  

 Hello, Jamf Nation!   We’re kicking off 2026 by celebrating you, an incredible community of wickedly smart and super kind humans who believe sharing knowledge, and supporting each other, is what makes Jamf Nation special.   You’re invited to Celebrating Jamf Nation: A Kickoff to 2026 with special guest, Chris Schembra, on January 27. Featured in Rolling Stone, Fast Company and Entrepreneaur, Chris received global recognition for his unique approach to building community. He’s gathered Fortune 500 executives, NFL players and complete strangers to simple pasta dinners that create life-changing moments. Chris is someone you want to meet, so we’re thrilled to have him join us in a virtual experience to kick off 2026!  Whether you’re deeply involved in Jamf Nation or just beginning your journey with us, this is a chance to connect with fellow community members - and even some Jamfs - in a meaningful, energizing way. If you need a jolt of inspiration – mark your calendar now!  📅 Date: Tues

Curious if the the “Release” section of your Jamf School dashboard taking you to a missing link page. I get a 404. Seems like such an easy thing to fix so I just thought maybe I’m the only one experiencing it.Link it send me to - https://docs.jamf.com/jamf-school/documentation/Release_History.htmlLink “Release Section” seems like it should be sending me to - https://learn.jamf.com/en-US/bundle/jamf-school-release-notes/page/Jamf_School_Portal_Release_Notes.html  

Does anyone know if JAMF is working on adding the 13+ rating to the drop down menu in JAMF School iOS restriction profile under the media content tab?  

 I have a single machine that is active and online and running policy, but the inventory has not completed for any policy since May.  I am unable to remotely access this machine to re-enroll and I am unable to tell who is using it as the stale inventory record only shows the account of one of our local techs, who I have confirmed does not have the machine.Any ideas?  

Hi All,we currently use Jamf School to manage our iPad estate.  it works great for what we use it for, but the goalposts have been changed on us.Moving forward, Cyber Essentials requirement are set to change so that our devices need to be trusted.  Our trusted IP address will no longer satisfy the requirements.  So we will need to add our devices to Microsoft Intune.  I believe that this is configurable with JAMF Pro, but not JAMF School.  Is this the case? Is this a feature that will be added in the near future?We are currently having to evaluate using Microsoft InTune as an MDM alternative to JAMF School if it cannot fulfill this requirement, and it is already covered in our Microsoft Licence.Any advice would be much appreciated.

Created label for the installation of Dockanchor :dockanchor)name="DockAnchor"type="zip"downloadURL="$(downloadURLFromGit bwya77 DockAnchor)"appNewVersion="$(versionFromGit bwya77 DockAnchor)"expectedTeamID="4XW3W377NX";; I am getting the following error :Script result: 2025-11-13 15:44:54 : REQ : : shifting arguments for Jamf 2025-11-13 15:44:54 : INFO : dockanchor : setting variable from argument NOTIFY=silent 2025-11-13 15:44:54 : INFO : dockanchor : Total items in argumentsArray: 1 2025-11-13 15:44:54 : INFO : dockanchor : argumentsArray: NOTIFY=silent 2025-11-13 15:44:54 : REQ : dockanchor : ################## Start Installomator v. 10.9beta, date 2025-08-07 2025-11-13 15:44:54 : INFO : dockanchor : ################## Version: 10.9beta 2025-11-13 15:44:54 : INFO : dockanchor : ################## Date: 2025-08-07 2025-11-13 15:44:54 : INFO : dockanchor : ################## dockanchor 2025-11-13 15:44:56 : INFO : dockanchor : Reading arguments again: NOTIFY=silent 2025-11-13 15:44:5

Hello,Is it possible to configure Custom Analytic if someone unenrolls their device from Jamf Pro (i.e., uninstalls the Jamf MDM profile)?

Have a weired Webex issue that started a month ago. When the user opens his Webex, to join a meeting, he get's the error message "Webex quit unexpectedly and you can click reopen, report or ignore. The first time it happened, we just did an uninstall/reinstall and it worked for a couple of weeks. It's happened a couple more times. I recently tried using the webex uninstaller, we also checked the webex dependicy folders they provided to make sure there wasn't anything left over. I updated webex on my Mac and it worked, so I created a package using composer, but it keeps getting the same error. Below is a script I found that the user ran and after the uninstall, he restarted an not luck after. I do see something about checking keychain and resetting the TCC permissions which I'll try today. #!/bin/bash# Get the currently logged-in userCURRENT_USER=$(stat -f "%Su" /dev/console)USER_HOME=$(eval echo "~$CURRENT_USER")echo "Starting Webex residual file cleanup for user: $CURRENT_USER"# Defin

We are trying to load an in-house app into Mobile Device apps.  We started to make the new record, uploaded the file in archived app file, but had to cancel the attempt.  Trying a 2nd time, it reports there is already an ipa with that name.  Where can I go to delete that or can I just select that??  I did not find it in Settings > Packages.

Is there any way to get the password sync status from the new Self Service+ as Extension Attribute?Would be really nice to see if Google and the local user are in sync. Other ways to archive it are welcome 😀

Has anyone gotten jamf2snipe working with Jamf Pro Cloud API Roles & Clients (OAuth client ID/secret)? All documentation I see is for Classic API, which is blocked here

Hi Everyone,Need your help if you have a script that can mount and unmount SMB the can be use as repository of screenshotsThank you.

HelloIn the process of testing single sign on extension for managed Ipads, I have deployed the Authenticator app and the single sign on profile with following plist.SSO is working great on all apps except outlook, I think it has something to do with how Outlook use SSO/ auth method it uses. <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict> <!-- Existing Keys --> <key>AppPrefixAllowList</key> <string>com.microsoft.,com.apple.,com.jamf.,com.jamfsoftware.</string> <key>browser_sso_interaction_enabled</key> <integer>1</integer> <key>disable_explicit_app_prompt</key> <integer>0</integer> <!-- Managed App Config for Intune --> <key>IntuneMAMUPN</key> <string>$EMAIL</string> <!-- Required for Microsoft Enterpris

Hi everyone,I’m trying to figure out whether it’s possible to distinguish between devices with a physical SIM, devices without a SIM, and eSIM devices using Smart Groups. I’m not sure if anyone else is seeing the same behavior I am.My Environment:Jamf Pro On-Prem 11.22.1-t1762179835791 (Windows Server)Devices under management:iPhone (China version) iPad (China version)What I try to Achive:Create Smart Groups that can identify:Devices with a physical SIM inserted Devices without a SIM card Devices using eSIMWhat I’ve tested so far:Using Phone Number: Some devices can’t retrieve the SIM’s phone number. Using Current Carrier Network: All devices running iOS 26 and later fail to return this field. However, devices that could read the phone number on iOS 18 can still do so after upgrading to iOS 26. Using Current Mobile Country Code and Current Mobile Network Code: These values are available for devices with a SIM card on both iOS 18 and iOS 26. However, I also found that unactivated eSIM d

Hey All, curious if anyone has had any issues deploying either of the above mentioned apps to machiens already delployed. Im currently running a testing group and I have both installed but my Password Sync status states its not synced but my account password and mac password are the same. Has anyone ran into a similar issue ? 

I have two reporting tasks in Jamf Pro that I dread every time I have to do them: Creating a Security Stack report Creating a report that shows which computers have a specific application installed and which do not What I’m trying to doFor the security stack, we have (for example) 5 security products that should be installed across our fleet.What I’ve been doing is exporting Computer Applications inventory and working from the CSV. The problem is the way Jamf structures the export: The application name appears once The rows beneath it (per computer) are blank until the next application name appears Those blank rows still represent devices that have the app installed, but the format makes filtering, automation, and reporting extremely painful I’ve worked with other tools where the export shows the application name on every row per computer, even if the version is the same, which makes reporting much easier.What I’ve consideredThe only reliable approach I can think of is using Exte

When trying to resolve certain messages in the notfication page, the following error is coming up - Our development team is notified about this problem. Problem identification: #52c7d9c084285505This has been happening for some time and I was wondering if anyone has been able to come up with a solution.

In our Jamf Protect tenant, we have a multitiude of devices that have been retired and no longer in use.  They still show in Jamf Protect unless we manually delete them and skew our results. Is the correct process to keep our Jamf Protect Computers inventory tidy to manually delete them from Jamf Protect?  Does Jamf Protect have any auto-expire policies?  For example, if disconnected for 6 months then purge device from Jamf Protect.